From f14d6a20ab01bbb97ec4bccb6acfbdbaf51e140f Mon Sep 17 00:00:00 2001
From: Chris Morgan <cmorgan@alum.wpi.edu>
Date: Sat, 30 Jul 2005 16:04:57 +0000
Subject: [PATCH] Use the full path when calling move_uploaded_file()

---
 include/screenshot.php | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/include/screenshot.php b/include/screenshot.php
index 8e243ab..b4c2ef7 100644
--- a/include/screenshot.php
+++ b/include/screenshot.php
@@ -79,18 +79,20 @@ class Screenshot {
         if(query_appdb("INSERT INTO appData $sFields VALUES $sValues", "Error while creating a new screenshot."))
         {
             $this->iScreenshotId = mysql_insert_id();
-            if(!move_uploaded_file($hFile['tmp_name'], "data/screenshots/originals/".$this->iScreenshotId))
-            {
 
+            /* make sure we supply the full path to move_uploaded_file() */
+            $moveToPath = appdb_fullpath("data/screenshots/originals/").$this->iScreenshotId;
+            if(!move_uploaded_file($hFile['tmp_name'], $moveToPath))
+            {
                 // whoops, moving failed, do something
-                addmsg("Unable to move screenshot from ".$hFile['tmp_name']." to data/screenshots/originals/".$this->iScreenshotId, "red");
+                addmsg("Unable to move screenshot from '".$hFile['tmp_name']."' to '".$moveToPath."'", "red");
                 $sQuery = "DELETE
                            FROM appData 
                            WHERE id = '".$this->iScreenshotId."'";
                 query_appdb($sQuery);
                 return false;
             } else // we managed to copy the file, now we have to process the image
-            {   
+            {
                 $this->sUrl = $this->iScreenshotId;
                 if($this->generate())
                 {